Hardy encryption details

[update_manager]

Can anyone point me to a site that has the details of the install time encryption used in Hardy?

I'd like to know:

• Is the swap partition encrypted?

• How can the password be changed after the installation?

[bwhite82]

Not sure on your password question, however, yes, the swap partition is encrypted, the only thing that isn't is the /boot partition which must remain unencrypted to be bootable.

[michaelzap]

For those of you who are using Hardy with encryption, how's it working for you? Is there any noticeable speed difference? I have a perfectly good unencrypted Hardy system (upgraded from Gutsy), but I think I'm going to start fresh with encrypted Hardy on a new drive.

[Steve413z]

For those of you who are using Hardy with encryption, how's it working for you? Is there any noticeable speed difference? I have a perfectly good unencrypted Hardy system (upgraded from Gutsy), but I think I'm going to start fresh with encrypted Hardy on a new drive.

no, not much speed difforence, (on my core duo laptop), if it's an older machine, there might be a problem.

make sure you get the Text Installer "Alternative" CD or the DVD to install using full disk encryption

[hyper_ch]

Is the swap partition encrypted?

yes

How can the password be changed after the installation?

Yes, it can

[sunbird]

I wrote this how-to, which is focused on intel Macbook Pros dual-booting ubuntu, but the instructions for the encryption should be the same.

I've noticed zero speed difference.

[hyper_ch]

How can the password be changed after the installation?

sudo cryptsetup luksAddKey /dev/sdX

You can have up to 10 slots of passwords or keyfiles and with luksAddKey you add new ones.... and with luksDeleteKey you remove existing ones.

Have a look at the cryptsetup man pages how to use those commands at fully extend.

[update_manager]

sudo cryptsetup luksAddKey /dev/sdX

You can have up to 10 slots of passwords or keyfiles and with luksAddKey you add new ones.... and with luksDeleteKey you remove existing ones.

Have a look at the cryptsetup man pages how to use those commands at fully extend.

Thanks!

If I wanted to take an existing mapping, I could boot into my current setup, then use:
cryptsetup reload luksAddKey

Does this sound right?

[hyper_ch]

not sure what you mean

[update_manager]

not sure what you mean

Its not clear to me from the man page if cryptsetup can be used on mounted drives.

In other words - can I do a default install, boot into encrypted partition then make changes.